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DETAILED ACTION 

1 . The response of 1/7/20 1 0 was received and considered. 

2. Claims 64-86 are pending. 



Response to Arguments 

3. Applicant's arguments filed 1/7/2010 have been fully considered but they are not persuasive. 

a. Applicant's response (p. 10) argues that Ahonen and Hawkes fail to teach the amended 
limitations, namely (1) that the private key is not accessible to the mobile equipment, (2) the 
secure processing unit provides more secure key storage than the mobile equipment and (3) the 
secure processing unit has processing power sufficient to deciypt a broadcast access key and 
generate a short term key, but not to decrypt multimedia content. However, Hawkes discloses 
that (regarding (1)), the private key (RK) is not accessible to the mobile equipment (RK is not 
provided to the ME, f 72), (regarding (2)), the secure processing unit provides more secure key 
storage than the mobile equipment (SUMU has a secure memory unit, 1(65, storing an A-key, |72 
an RK, f72 and SK, f 78, whereas the ME only stores the SK, f78) and (regarding (3)), the secure 
processing unit (SUPU) has processing power to deciypt a broadcast access key and a short term 
key (UIM is able to recover the value of BAK, |70 and able to able to compute SK, 1(73), but not 
to decrypt multimedia content (SUPU does not have significant processing power for functions 
beyond security and key procedures such as to allow encryption of the broadcast content of the 
HSBS, 1(66). Therefore, the amended limitations are disclosed in at least Hawkes. 



Claim Objections 

4. Claims 72-81 are objected to because of the following informalities: 
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b. 



Regarding claim 72, lines 4-5, the limitation "securing storing" is believed to read 



"securely storing". 



c. 



Regarding claim 77, lines 5-6, the limitation "secure processing unit provides more 



secure key storage than the secure processing unit" is believed to read "secure processing unit 



provides more secure key storage than the mobile equipment". 



d. 



Regarding claims 77-81, the preamble "machine readable medium" should recite instead 



"a non-transitory machine-readable medium" such that it is understood the claim does not include 
transitory mediums. The broadest reasonable interpretation of a claim drawn to a computer 
readable medium (also called machine readable medium and other such variations) typically 
covers forms of non-transitory tangible media and transitory propagating signals per se in view of 
the ordinary and customary meaning of computer readable media, particularly when the 
specification is silent. See MPEP §21 1 1.01. A claim drawn to such a computer readable medium 
that covers both transitory and non-transitory embodiments may be amended to narrow the claim 
to cover only statutory embodiments to avoid a rejection under 35 U.S.C. § 101 by adding the 
limitation "non-transitory" to the claim. Such an amendment would typically not raise the issue 
of new matter, even when the specification is silent because the broadest reasonable interpretation 
relies on the ordinary and customary meaning that includes signals per se. Further, an 
amendment to the specification to provide sufficient antecedent basis for the claim terminology, 
such as "non-transitory" may be necessary and would not typically raise the issue of new matter. 
Appropriate correction is required. 



Claim Rejections - 35 USC§ 112 



5. 



The following is a quotation of the second paragraph of 35 U.S.C. 1 12: 



The specification shall conclude with one or more claims particularly pointing out and distinctly claiming the 
subject matter which the applicant regards as his invention. 
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6. Claims 64-71 and 77-81 are rejected under 35 U.S.C. 1 12, second paragraph, as being indefinite 
for failing to particularly point out and distinctly claim the subject matter which applicant regards as the 
invention. 

e. Regarding claims 64-71 and 77-81, the claims as amended, include limitations directed to 
the processing power or memory size of the respective components. However, it is unclear how 
or if these limitations have any effect on the scope of the method or machine readable medium 
claims, respectively. 

Claim Rejections - 35 USC§ 103 

7. The following is a quotation of 35 U.S.C, 103(a) which forms the basis for all obviousness 
rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in section 102 of 
this title, if the differences between the subject matter sought to be patented and the prior art are such that the subject matter as 
a whole would have been obvious at the time the invention was made to a person having ordinary skill in the art to which said 
subject mailer pertains. Patentability shall not be negatived by the manner in which the invention w as made. 

8. Claims 64-69, 71-75, 77-80 & 82-85 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over U.S. Patent Application Publication 2002/0141591, published 1 1/3/2002 to Hawkes et al. (Hawkes) 
in view of U.S. Patent Application Publication 2006/0168446 to Ahonen et al. (Ahonen). 

Regarding claim 64, Hawkes discloses a method for broadcasting encrypted multimedia content 
from a content provider (content server, 163) to a plurality of authorized terminals (MS) over the air 
(157), comprising each terminal having a mobile equipment (ME, Fig. 4, #306) and having a secure 
processing unit (UIM, Fig. 4, #308) that securely stores a unique key (RK is stored in SUMU, Fig. 4, 
#314, 174), such that the unique private key is not accessible to the mobile equipment of the respective 
terminal (SUMU discourages unauthorized access to the information, 165 and RK is not provided to the 
ME, 172), the secure processing unit provides more secure key storage than the mobile equipment 
(SUMU has a secure memory unit, 165, storing an A-key, 172 an RK, 172 and SK, 178, whereas the ME 
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only stores the SK, 178), the secure processing unit (SUPU) has processing power sufficient to decrypt a 
broadcast access key and to generate a short term key (UIM is able to recover the value of BAK, 170 and 
able to able to compute SK, 173) and the secure processing unit does not have processing power sufficient 
to decrypt multimedia content (SUPU does not have significant processing power for functions beyond 
security and key procedures such as to allow encryption of the broadcast content of the HSBS, 166) and 
the broadcast access key (BAK) is encrypted by the content provider using the unique keys (RK) of each 
of the respective terminals to authorize the respective terminal to receive the encrypted multimedia 
content (BAK is encrypted with RK, 174), each terminal receiving the respective encrypted broadcast 
access key (BAK) over the air from the content provider (BAKI is received from CS, 1)74) and providing 
the respective encrypted broadcast access key (BAKI is passed to the UIM, 1)74) to the terminal's secure 
processing unit (UIM, f 74), wherein the terminal's secure processing unit (UIM) decrypts the encrypted 
broadcast access key (BAKI) using the secure processing unit's unique key (RK is used in the UIM to 
decrypt BAK from BAKI, f 74) and securely stores the broadcast access key (BAK is stored in SUMU, 
174), each terminal receiving short-term key information (SKI, 176 & 178) and encrypted multimedia 
content (received broadcast content, f 80) over the air from the content provider (CS) to the terminals 
(MS, 1(76 & 180), wherein the content is encrypted with a short-term key (1)81), and wherein the short- 
term key is generated using the broadcast access key (BAK) and short-term key information (SKI and 
BAK are processed to determine SK, 176), and provides the short-term key (SK) to the terminal's mobile 
equipment (SK is passed to ME, H80-81, last two lines of each), and each terminal's mobile equipment 
decrypting the multimedia content using the short-term key (ME decrypts the received broadcast content, 
H80-8 1 , last two lines of each). Hawkes lacks each terminals forwarding a unique public key over the air 
to the content provider and lacks wherein the secure processing unit stores a unique private key (instead 
of Hawkes's RK), corresponding to the unique public key. However, Ahonen teaches a system where a 
terminal forwards a unique public key over the air (over a 3G network, 137) to a content provider 
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(terminal sends a registration message to a group controller, the message including a copy of the 
terminal's public key, 1(38), wherein each terminal stores a unique private key corresponding to the 
unique public key (terminal creates a signature using the private key, 138 & 142, showing that the 
terminal stores the private key). Similarly to Hawkes's RK, the private key that corresponds to the 
forwarded unique public key in Ahonen is used to decrypt a received encrypted key encrypting key 
(KEK), which is similar to Hawkes's BAK (141). The KEK is then used to decrypt a received encrypted 
traffic encrypting key (TEK, 141) which decrypts the broadcast content (1)36) that is received, possibly 
from the group controller (119). Therefore, it would have been obvious to one having ordinary skill in the 
art at the time the invention was made to modify Hawkes such that each terminal (MS) forwards a unique 
public key over the air to the content provider (CS), wherein the secure processing unit (UIM) stores a 
unique private key (instead of Hawkes's RK), corresponding to the unique public key. One of ordinary 
skill would have been motivated to perform this modification to achieve a simple mechanism for key 
dissemination, as taught by Ahonen (17). One of ordinary skill in the art at the time the invention was 
made would appreciate this benefit because Ahonen is using the existing, well-known, public key 
infrastructure to share a key, rather than a more complex protocol such as AKA or IKE. 

Regarding claim 65, Hawkes, as modified above, discloses wherein the short-term key (SK) is 
accessible to a user (Hawkes discloses that data in the ME is easily accessed, 164 and that SK is passed to 
the ME for decrypting of the broadcast content, 178; therefore, the SK is accessible to a user). 

Regarding claim 66, Hawkes, as modified above, discloses wherein the short-term key is changed 
by the content provider at a rate such that the cost of an unauthorized terminal user obtaining the short- 
term key from the mobile equipment exceeds the value of the short-term key to the unauthorized terminal 
user (Hawkes discloses that the SK is changed frequently such that the cost of a non-subscriber obtaining 
SK form the memory exceeds the value of SK, 168). 
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Regarding claim 67, Hawkes, as modified above, discloses wherein the secure processing unit 
(UIM) is removable from the terminal fl[66). 

Regarding claim 68, Hawkes, as modified above, discloses wherein the short-term key 
information (SKI) is the short-term key encrypted using the broadcast access key (SKI may be the 
encryption of SK using BSK as the key, f76). 

Regarding claim 69, Hawkes, as modified above, discloses wherein the short-term key (SK) is 
generated by applying a cryptographic hash to a concatenation of the short-term key information (SKI) 
and the broadcast access key (BAK, f 76, last three lines). 

Regarding claim 71, Hawkes, as modified above, discloses wherein at least one terminal (MS) 
comprises a mobile station (Fig. 3, #206 & 157). 

Regarding claim 72, Hawkes discloses an integrated circuit (1)107) for a mobile station (MS, Fig. 
4, #300) comprising means for securely storing a unique key (RK is stored in SUMU, Fig. 4, #314, |74) 
such that the unique key is not accessible to a user (SUMU discourages unauthorized access to the 
information, |65 and RK is not provided to the ME, 172), wherein the means for securely storing (SUPU) 
has processing power sufficient to decrypt a broadcast access key and to generate a short term key (UIM 
is able to recover the value of BAK, 170 and able to able to compute SK, 173), and does not have 
processing power sufficient to decrypt multimedia content ( SUPU does not have significant processing 
power for functions beyond security and key procedures such as to allow encryption of the broadcast 
content of the HSBS, 166) and wherein the content provider (CS) encrypts a broadcast access key (BAK) 
with each of the unique keys (RK) to authorized an integrated circuit securely storing a corresponding key 
to receive the encrypted multimedia content (BAK is enciypted with RK, 174 and RK is stored in the 
UIM, 174), means (MS) for receiving the respective encrypted broadcast access key (BAK) over the air 
from the content provider (BAKI is received from CS, 174), means (MS) for decrypting the enciypted 
broadcast access key (BAKI) using the secure processing unit's unique key (RK is used in the UIM to 
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decrypt BAK from BAKI, 174) and securely storing the broadcast access key (BAK is stored in SUMU, 
174), wherein the securely stored broadcast access key is not accessible to a user (SUMU discourages 
unauthorized access to the information, 165 and the BAK is stored in the SUMU, 1(74), means (MS) for 
receiving short-term key information (SKI, 176 & 178) and encrypted multimedia content (received 
broadcast content, 180) over the air from the content provider (CS) to the a plurality of mobile stations 
(Fig. 3, #206) each having the integrated circuit (MS, 176 & 180, Fig. 4, #300), wherein the content is 
encrypted with a short-term key (18 1), and wherein the short-term key is generated using the broadcast 
access key (BAK) and short-term key information (SKI and BAK are processed to determine SK, 176), 
means (MS) for generating the short term key using the securely stored broadcast access key (BAK) and 
the broadcast short-term key information (SKI and BAK are processed to determine SK, 176) and means 
(MS) for decrypting the multimedia content using the short-term key (ME deciypts the received broadcast 
content using SK, H80-8 1 , last two lines of each), wherein the means for securely storing provides more 
secure key storage than the means for decrypting the multimedia content (SUMU has a secure memory 
unit, 165, storing an A-key, 172 an RK, 172 and SK, 178, whereas the ME only stores the SK, 178). 
Hawkes lacks forwarding a unique public key over the air to the content provider and lacks securely 
storing a unique private key (instead of Hawkes's RK), corresponding to the unique public key. 
However, Ahonen teaches a system where a terminal forwards a unique public key over the air (over a 3G 
network, 137) to a content provider (terminal sends a registration message to a group controller, the 
message including a copy of the terminal's public key, 138), wherein each terminal stores a unique 
private key corresponding to the unique public key (terminal creates a signature using the private key, 138 
& 142, showing that the terminal stores the private key). Similarly to Hawkes's RK, the private key that 
corresponds to the forwarded unique public key in Ahonen is used to decrypt a received encrypted key 
encrypting key (KEK), which is similar to Hawkes's BAK (141). The KEK is then used to decrypt a 
received encrypted traffic encrypting key (TEK, 141) which decrypts the broadcast content (136) that is 
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received, possibly from the group controller (1(19). Therefore, it would have been obvious to one having 
ordinary skill in the art at the time the invention was made to modify Hawkes's terminal such that each 
terminal (MS) forwards a unique public key over the air to the content provider (CS), wherein the secure 
processing unit (UIM) stores a unique private key (instead of Hawkes's RK), corresponding to the unique 
public key. One of ordinary skill would have been motivated to perform this modification to achieve a 
simple mechanism for key dissemination, as taught by Ahonen fl]7). One of ordinary skill in the art at the 
time the invention was made would appreciate this benefit because Ahonen is using the existing, well- 
known, public key infrastructure to share a key, rather than a more complex protocol such as AKA or 
IKE. 

Regarding claim 73, Hawkes, as modified above, discloses wherein the short-term key (SK) is 
accessible to a user (Hawkes discloses that data in the ME is easily accessed, f 64 and that SK is passed to 
the ME for decrypting of the broadcast content, TJ78; therefore, the SK is accessible to a user). 

Regarding claim 74, Hawkes, as modified above, discloses wherein the short-term key 
information (SKI) is the short-term key encrypted using the broadcast access key (SKI may be the 
encryption of SK using BSK as the key, |76). 

Regarding claim 75, Hawkes, as modified above, discloses wherein the short-term key (SK) is 
generated by applying a cryptographic hash to a concatenation of the short-term key information (SKI) 
and the broadcast access key (BAK, f 76, last three lines). 

Regarding claim 77, Hawkes discloses a machine-readable medium (1(108) comprising code for 
securely storing a unique key (RK is stored in SUMU, Fig. 4, #3 14, |74), in a secure processing unit of a 
terminal (UIM) such that the unique key is not accessible to a mobile equipment of the terminal (SUMU 
discourages unauthorized access to the information, |65 and RK is not provided to the ME, \12), wherein 
the secure processing unit provides more secure key storage than the mobile equipment (SUMU has a 
secure memory unit, \65, storing an A-key, \I2 an RK, %12 and SK, 1(78, whereas the ME only stores the 
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SK, 178), wherein the secure processing unit (SUPU) has processing power sufficient to decrypt a 
broadcast access key and to generate a short term key (UIM is able to recover the value of BAK, 170 and 
able to able to compute SK, 173), but does not have processing power sufficient to decrypt multimedia 
content (SUPU does not have significant processing power for functions beyond security and key 
procedures such as to allow encryption of the broadcast content of the HSBS, 166) and wherein the 
broadcast access key is encrypted by the content provider (CS) using the unique keys (RK) to authorize 
the respective terminal to receive the encrypted multimedia content (BAK is enciypted with RK, 174 and 
RK is stored in the UIM, 174), code (MS, 1(108) for receiving the respective encrypted broadcast access 
key (BAK) over the air from the content provider (BAKI is received from CS, 1)74), code (MS, 1)108) for 
decrypting the encrypted broadcast access key (BAKI) using the secure processing unit's unique key (RK 
is used in the UIM to decrypt BAK from BAKI, 174) and securely storing the broadcast access key (BAK 
is stored in SUMU, 174), wherein the securely stored broadcast access key is not accessible to a user 
(SUMU discourages unauthorized access to the information, 165 and the BAK is stored in the SUMU, 
174), code (MS, 1108) for receiving short-term key information (SKI, 176 & 178) and encrypted 
multimedia content (received broadcast content, 180) over the air from the content provider (CS) to the a 
plurality of terminals (Fig. 3, #206) each having a integrated circuit (MS, 176, 180 & 1107, Fig. 4, #300), 
wherein the multimedia content is encrypted with a short-term key (18 1 ), and wherein the short-term key 
is generated using the broadcast access key (BAK) and short-term key information (SKI and BAK are 
processed to determine SK, 176), code (MS, 1108) for generating the short term key using the securely 
stored broadcast access key (BAK) and the broadcast short-term key information (SKI and BAK are 
processed to determine SK, 176) and code (MS, 1108) for decrypting the multimedia content using the 
short-term key (ME decrypts the received broadcast content using SK, H80-81, last two lines of each). 
Hawkes lacks forwarding a unique public key over the air to the content provider and lacks securely 
storing a unique private key (instead of Hawkes's RK), corresponding to the unique public key. 
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However, Ahonen teaches a system where a terminal forwards a unique public key over the air (over a 3G 
network, |37) to a content provider (terminal sends a registration message to a group controller, the 
message including a copy of the terminars public key, 1)38), wherein each terminal stores a unique 
private key corresponding to the unique public key (terminal creates a signature using the private key, 1(38 
& 1(42, showing that the terminal stores the private key). Similarly to Hawkes's RK, the private key that 
corresponds to the forwarded unique public key in Ahonen is used to decrypt a received encrypted key 
encrypting key (KEK), which is similar to Hawkes's BAK (1)41). The KEK is then used to decrypt a 
received encrypted traffic encrypting key (TEK, %4l) which decrypts the broadcast content (1(36) that is 
received, possibly from the group controller (1(19). Therefore, it would have been obvious to one having 
ordinary skill in the art at the time the invention was made to modify Hawkes's terminal such that each 
terminal (MS) comprises code that forwards a unique public key over the air to the content provider (CS), 
wherein the terminal includes code for storing securely a unique private key (instead of Hawkes's RK), 
corresponding to the unique public key. One of ordinary skill would have been motivated to perform this 
modification to achieve a simple mechanism for key dissemination, as taught by Ahonen (|7). One of 
ordinary skill in the art at the time the invention was made would appreciate this benefit because Ahonen 
is using the existing, well-known, public key infrasft-ucture to share a key, rather than a more complex 
protocol such as AKA or IKE. 

Regarding claim 78, Hawkes, as modified above, discloses wherein the short-term key (SK) is 
accessible to a user (Hawkes discloses that data in the ME is easily accessed, 1(64 and that SK is passed to 
the ME for decrypting of the broadcast content, ^[78; therefore, the SK is accessible to a user). 

Regarding claim 79, Hawkes, as modified above, discloses wherein the short-term key 
information (SKI) is the short-term key encrypted using the broadcast access key (SKI may be the 
encryption of SK using BSK as the key, 176). 
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Regarding claim 80, Hawkes, as modified above, discloses wherein the short-term key (SK) is 
generated by applying a cryptographic hash to a concatenation of the short-term key information (SKI) 
and the broadcast access key (BAK, 176, last three lines). 

Regarding claim 82, Hawkes discloses an apparatus (MS, Fig. 4, #300) for receiving encrypting 
multimedia content broadcast over the air (Fig. 3, #206) from a content provider (CS, 163) to a plurality 
of authorized apparatuses (Fig. 3, #206) comprising a mobile equipment (ME, Fig. 4, #306) configured to 
decrypt the multimedia content using the short-term key (ME decrypts the received broadcast content 
using SK, ||80-81, last two lines of each), wherein the multimedia content is encrypted with the short- 
term key (SK, 1[81), and wherein the short-term key is generated using the broadcast access key (BAK) 
and short-term key information (SKI and BAK arc processed to determine SK, 176), and a secure 
processing unit (UIM, Fig. 4, #308) configure to securely store a unique key (RK is stored in SUMU, Fig. 
4, #314, 174) that is not accessible to the mobile equipment (SUMU discourages unauthorized access to 
the information, 165 and RK is not provided to the ME, 172), wherein the secure processing unit provides 
more secure key storage than the mobile equipment (SUMU has a secure memory unit, 165, storing an A- 
key, 172 an RK, 172 and SK, 178, whereas the ME only stores the SK, 178), wherein the secure 
processing unit (SUPU) has processing power sufficient to decrypt a broadcast access key and to generate 
a short term key (UIM is able to recover the value of BAK, 170 and able to able to compute SK, 173), but 
does not have processing power sufficient to deciypt multimedia content (SUPU does not have significant 
processing power for functions beyond security and key procedures such as to allow encryption of the 
broadcast content of the HSBS, 166) and wherein the content provider (CS) encrypts a broadcast access 
key (BAK) with the unique key (RK) to authorize an apparatus having the secure processing unit 
(authorize the MS) securely storing the corresponding key (RK) to receive the encrypted multimedia 
content (BAK is encrypted with RK, 174 and RK is stored in the UIM, 174), receive the respective 
encrypted broadcast access key (BAK) over the air (Fig. 3, #206) from the content provider (BAKI is 



Application/Control Number: 1 0/6 1 5,882 Page 1 3 

Art Unit: 2439 

received from CS, 174), decrypt the encrypted broadcast access key (BAKI; RK is used in the UIM to 
decrypt BAK from BAKI, 174) and securely store the broadcast access key (BAK is stored in SUMU, 
174), wherein the securely stored broadcast access key is not accessible to a user (SUMU discourages 
unauthorized access to the information, Tf65 and the BAK is stored in the SUMU, 174), receive the short- 
term key information (SKI) broadcast over the air from the content provider (CS sends SKI to MS, 176) 
and generate the short-term key using the securely stored broadcast access key (BAK) and broadcast 
short-term key information (SKI and BAK are processed to determine SK, 176). Hawkes lacks the mobile 
equipment forwarding a unique public key over the air to the content provider and lacks the secure 
processing unit securely storing a unique private key (instead of Hawkes's RK), corresponding to the 
unique public key. However, Ahonen teaches a system where a terminal forwards a unique public key 
over the air (over a 3G network, 137) to a content provider (terminal sends a registration message to a 
group controller, the message including a copy of the terminal's public key, 138), wherein each terminal 
stores a unique private key corresponding to the unique public key (terminal creates a signature using the 
private key, 138 & 142, showing that the terminal stores the private key). Similarly to Hawkes's RK, the 
private key that corresponds to the forwarded unique public key in Ahonen is used to decrypt a received 
encrypted key encrypting key (KEK), which is similar to Hawkes's BAK (141). The KEK is then used to 
decrypt a received encrypted traffic encrypting key (TEK, 141) which decrypts the broadcast content 
(136) that is received, possibly from the group controller (119). Therefore, it would have been obvious to 
one having ordinary skill in the art at the time the invention was made to modify Hawkes's terminal such 
that the mobile equipment (ME) forwards a unique public key over the air to the content provider (CS) 
and the secure processing unit (UIM) stores a unique private key (instead of Hawkes's RK), 
corresponding to the unique public key. One of ordinary skill would have been motivated to perform this 
modification to achieve a simple mechanism for key dissemination, as taught by Ahonen (17). One of 
ordinary skill in the art at the time the invention was made would appreciate this benefit because Ahonen 



Application/Control Number: 1 0/6 1 5,882 Page 1 4 

Art Unit: 2439 

is using the existing, well-known, public key infrastructure to share a key, rather than a more complex 
protocol such as AKA or IKE. 

Regarding claim 83, Hawkes, as modified above, discloses wherein the short-term key (SK) is 
accessible to a user (Hawkes discloses that data in the ME is easily accessed, |64 and that SK is passed to 
the ME for decrypting of the broadcast content, |78; therefore, the SK is accessible to a user). 

Regarding claim 84, Hawkes, as modified above, discloses wherein the short-term key 
information (SKI) is the short-term key encrypted using the broadcast access key (SKI may be the 
encryption of SK using BSK as the key, f 76). 

Regarding claim 85, Hawkes, as modified above, discloses wherein the short-term key (SK) is 
generated by applying a cryptographic hash to a concatenation of the short-term key information (SKI) 
and the broadcast access key (BAK, f 76, last three lines). 

9. Claims 70, 76, 81 & 86 are rejected under 35 U.S.C. 103(a) as being unpatentable over Hawkes 
and Ahonen, as applied to claims 69, 75, 80 & 85 above, in further view of Applied Cryptography, 
Second Edition by Bruce Schneier (Schneier). 

Regarding claims 70, 76, 81 & 86, Hawkes, as modified above, discloses wherein the short-term 
information is at least partly unpredictable, but lacks explicitly where it is a random value. However, 
Schneier discloses that good keys for encryption are random, such that all possible values are equally 
likely (i.e. unpredictable, p. 173, §Random Keys, 1|1). Therefore, it would have been obvious to one 
having ordinary skill in the art at the time the invention was made to modify Hawkes invention, as 
modified above, such that the short-term information is a random value. One of ordinary skill in the art 
would have been motivated to perform such a modification to enhance the security of the encrypted data 
such that the key is unpredictable via its randomness, as taught by Schneier. 
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Conclusion 

10. Applicant's amendment necessitated the new ground(s) of rejection presented in this Office 
action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). Applicant is 
reminded of the extension of time policy as set forth in 37 CFR 1. 136(a). 

A shortened statutory period for reply to this final action is set to expire THREE MONTHS from 
the mailing date of this action. In the event a first reply is filed within TWO MONTHS of the mailing 
date of this final action and the advisory action is not mailed until after the end of the THREE-MONTH 
shortened statutory period, then the shortened statutory period will expire on the date the advisory action 
is mailed, and any extension fee pursuant to 37 CFR 1 . 1 36(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutoiy period for reply expire later than SIX 
MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the examiner should 
be directed to MICHAEL J. SIMITOSKI whose telephone number is (571)272-3841. The examiner can 
normally be reached on Monday - Thursday, 6:45 a.m. - 4:15 p.m.. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, Edan 
Orgad can be reached on (571)272-7884. The fax phone number for the organization where this 
application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent Application 
Information Retrieval (PAIR) system. Status information for published applications may be obtained 
from either Private PAIR or Public PAIR. Status information for unpublished applications is available 
through Private PAIR only. For more information about the PAIR system, see http://pair- 
direct.uspto.gov. Should you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a USPTO Customer 
Service Representative or access to the automated information system, call 800-786-9199 (IN USA OR 
CANADA) or 571-272-1000. 



March 24, 2010 

/Michael J Simitoski/ 

Primary Examiner, Art Unit 2439 



